CVE-2024-53951: InDesign Desktop | Out-of-bounds Read (CWE-125)
InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-53951?
CVE-2024-53951 is rated as a medium severity vulnerability due to its potential to disclose sensitive memory.
How do I fix CVE-2024-53951?
To fix CVE-2024-53951, users should update Adobe InDesign to the latest version available from Adobe.
What versions of Adobe InDesign are affected by CVE-2024-53951?
CVE-2024-53951 affects Adobe InDesign versions 18.5.4 and earlier as well as versions up to 19.5.
Can CVE-2024-53951 be exploited remotely?
Exploitation of CVE-2024-53951 requires user interaction, making it less likely to be remotely exploitable.
What does CVE-2024-53951 allow an attacker to do?
CVE-2024-53951 could allow an attacker to bypass mitigations like ASLR by disclosing sensitive memory.